I don't think you need to get explicit agreement when using cookies to implement expected site functionality, as long as you don't use re-purpose them for profiling/targeting purposes. IANAL, though.

See: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm#se... (starting at "Howewer, some cookies are exempt …")